Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File:                     wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier:          1S5WgMnfrRXGzpMSyRHgSWPZg8Eg7nPIYq+N8UFNcLo=
Subject key identifier:   C7:F5:A9:C9:28:C4:3A:B7:41:D6:58:A3:11:E8:4C:A8:FD:E7:4B:8A
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer:       /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial:       0191FAB50D51C8BA6E5C60A0BF9DE35AD9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number:          AA
Signing time:             Mon 16 Sep 2024 12:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:55 +0000
Files and hashes:         1: n8h8qD2fxCDguAoqxFUYTf11SLY.roa (hash: YU6fm9rNwMb3nQmr7soAsMrW/If8mjHn9HxnNPWXajs=)
                          2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: O1wlFelXy7/3VlFZPFrBjLJEr9QkClGIK8t3fOvDK/U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:0d:51:c8:ba:6e:5c:60:a0:bf:9d:e3:5a:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
        Validity
            Not Before: Sep 16 12:00:55 2024 GMT
            Not After : Sep 17 12:00:55 2024 GMT
        Subject: CN=c7f5a9c928c43ab741d658a311e84ca8fde74b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:de:c9:a1:79:11:25:ba:da:60:9f:75:49:
                    62:bb:33:8e:11:1a:3c:55:e9:54:13:b1:12:33:01:
                    70:37:1c:4d:91:b4:74:51:2f:61:df:0c:74:00:5b:
                    1c:d7:d3:90:11:3e:ac:56:89:68:f3:50:08:59:7d:
                    dc:55:7d:85:28:0c:80:b0:e4:40:94:70:7f:42:ac:
                    97:09:74:78:8b:3b:c3:14:cd:b1:52:ad:e9:99:ea:
                    43:39:1f:c9:66:7e:2b:e3:bd:4f:77:d2:54:ed:e3:
                    31:79:05:61:49:4d:ce:10:2a:f7:f9:18:ca:c5:df:
                    64:8c:ef:75:6c:bc:01:d5:91:3e:41:f5:4d:8f:f2:
                    10:60:7c:17:51:cd:c8:35:89:59:a0:03:08:62:5f:
                    3b:79:29:6a:b0:cd:52:c7:94:b6:95:5c:37:aa:0d:
                    21:0b:8d:04:7b:a7:2d:27:fa:c5:45:25:69:5a:37:
                    79:95:e7:5a:38:e6:71:47:17:9f:46:53:00:9d:6f:
                    7e:e8:11:06:54:8f:28:0f:04:f8:c2:0c:0c:d3:b0:
                    08:96:72:2e:d8:27:cc:1d:2e:48:2b:86:49:79:15:
                    f8:5a:01:29:2c:59:21:0e:0d:cd:8a:d9:cd:d3:2a:
                    9e:bd:b4:a6:47:ea:2e:f8:47:ad:7c:17:54:e1:0b:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:A9:C9:28:C4:3A:B7:41:D6:58:A3:11:E8:4C:A8:FD:E7:4B:8A
            X509v3 Authority Key Identifier:
                keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:47:81:5d:fa:e7:a5:f5:67:94:bd:0f:ca:bc:85:b3:8c:82:
         5d:29:17:e0:11:94:34:53:83:dc:4a:57:99:a4:a9:59:48:a2:
         58:08:11:54:99:52:8f:73:b6:fb:3a:e9:6c:1a:88:ce:55:21:
         10:b9:a5:cf:d4:47:11:dc:de:1b:6a:e8:8f:90:9a:de:72:e3:
         4f:f7:1f:c5:36:1e:6e:c0:60:5b:3f:81:93:66:94:c2:48:49:
         57:69:c9:f6:a9:d9:29:65:ab:61:f4:20:ab:4d:ff:88:85:8c:
         f3:e0:6a:a7:05:5f:db:eb:fb:ef:78:a1:d8:6d:d5:ba:48:e9:
         2b:47:59:86:1e:6f:91:66:fe:d4:7b:3e:6d:ce:e4:90:d6:e5:
         48:20:7f:3b:87:78:33:f3:db:5e:8d:c8:be:17:5c:10:21:5a:
         92:07:4b:74:7b:83:a7:4e:8b:c1:2e:6a:5a:60:b6:cf:3d:a0:
         e2:74:e7:67:d4:73:eb:6e:92:ba:39:bf:1f:5e:d9:19:cf:b3:
         a3:bc:1c:3f:9a:d5:0e:92:9b:88:b1:c3:b4:90:50:8e:de:0a:
         22:ec:eb:8d:b5:6b:d7:6b:6d:94:f5:93:e6:c4:5a:61:09:ce:
         8d:5f:6a:d6:f6:f7:94:eb:e2:0d:4a:6b:b7:74:53:4e:c5:46:
         5f:14:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:23:35 2024 by rpki-client on console-ams.rpki-client.org